Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:15683' (ECDSA) to the list of known hosts. 2025/05/31 09:59:58 fuzzer started 2025/05/31 09:59:59 dialing manager at localhost:34361 syzkaller login: [ 101.145139] cgroup: Unknown subsys name 'net' [ 101.288954] cgroup: Unknown subsys name 'cpuset' [ 101.340228] cgroup: Unknown subsys name 'rlimit' 2025/05/31 10:00:22 syscalls: 2214 2025/05/31 10:00:22 code coverage: enabled 2025/05/31 10:00:22 comparison tracing: enabled 2025/05/31 10:00:22 extra coverage: enabled 2025/05/31 10:00:22 setuid sandbox: enabled 2025/05/31 10:00:22 namespace sandbox: enabled 2025/05/31 10:00:22 Android sandbox: enabled 2025/05/31 10:00:22 fault injection: enabled 2025/05/31 10:00:22 leak checking: enabled 2025/05/31 10:00:22 net packet injection: enabled 2025/05/31 10:00:22 net device setup: enabled 2025/05/31 10:00:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/05/31 10:00:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/05/31 10:00:22 USB emulation: enabled 2025/05/31 10:00:22 hci packet injection: enabled 2025/05/31 10:00:22 wifi device emulation: enabled 2025/05/31 10:00:22 802.15.4 emulation: enabled 2025/05/31 10:00:22 fetching corpus: 0, signal 0/0 (executing program) 2025/05/31 10:00:23 starting 8 fuzzer processes 10:00:23 executing program 0: ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x80, 0x7, 0x1, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x8, 0x8, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r0, 0x29, 0x0, 0x7, 0x7, 0x1, @local, @remote, 0x8, 0x20, 0x80000000, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r0, 0x2f, 0x1, 0x64, 0x0, 0x5, @mcast1, @mcast1, 0x8, 0x7800, 0x8, 0xce}}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0xba) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000002c0)={0x0, @can={0x1d, r0}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2}, @generic={0x18, "85044f3d25fc17c87d888f48277a"}, 0x1f, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)='lo\x00', 0x9, 0x200, 0xff86}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, r4, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000090}, 0x20010000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000580)={{0xa, 0x4e24, 0x3fffc0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6fb}, {0xa, 0x4e24, 0x4, @remote}, 0xfffd, [0x1, 0x8, 0x3, 0x8, 0x81, 0x4, 0x5, 0x6]}, 0x5c) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) mkdirat(r6, &(0x7f0000000740)='./file0\x00', 0x100) r7 = syz_open_dev$mouse(&(0x7f0000000780), 0x10000000000000, 0xa000) sendmsg$NL80211_CMD_NEW_MPATH(r7, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, 0x0, 0x620, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6d, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40212008}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r9, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3f}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x15}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c0}, 0x4008955) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r10, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0x2c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 10:00:23 executing program 1: ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x57) rt_sigqueueinfo(0xffffffffffffffff, 0x22, &(0x7f0000000000)={0x7, 0xffff48ff, 0x6}) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000080)={0x0, 0x9, 0x1000, 0x1}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40110200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x8, 0x70bd29, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}}, 0x20004880) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006280)=[{{&(0x7f0000000200), 0x6e, &(0x7f0000002280)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/4096, 0x1000}], 0x2, &(0x7f00000022c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002380)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/160, 0xa0}], 0x1, &(0x7f0000002500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000002640)=@abs, 0x6e, &(0x7f0000002d40)=[{&(0x7f00000026c0)=""/137, 0x89}, {&(0x7f0000002780)=""/96, 0x60}, {&(0x7f0000002800)=""/56, 0x38}, {&(0x7f0000002840)=""/185, 0xb9}, {&(0x7f0000002900)=""/223, 0xdf}, {&(0x7f0000002a00)=""/8, 0x8}, {&(0x7f0000002a40)=""/254, 0xfe}, {&(0x7f0000002b40)=""/192, 0xc0}, {&(0x7f0000002c00)=""/113, 0x71}, {&(0x7f0000002c80)=""/147, 0x93}], 0xa, &(0x7f0000002e00)}}, {{&(0x7f0000002e40), 0x6e, &(0x7f0000002ec0), 0x0, &(0x7f0000002f00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000002f40)=@abs, 0x6e, &(0x7f0000003040)=[{&(0x7f0000002fc0)=""/67, 0x43}], 0x1, &(0x7f0000003080)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f00000031c0), 0x6e, &(0x7f0000003340)=[{&(0x7f0000003240)=""/238, 0xee}], 0x1, &(0x7f0000003380)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f0000004940)=[{&(0x7f0000003440)=""/46, 0x2e}, {&(0x7f0000003480)=""/4096, 0x1000}, {&(0x7f0000004480)=""/17, 0x11}, {&(0x7f00000044c0)=""/168, 0xa8}, {&(0x7f0000004580)=""/33, 0x21}, {&(0x7f00000045c0)=""/242, 0xf2}, {&(0x7f00000046c0)=""/162, 0xa2}, {&(0x7f0000004780)=""/166, 0xa6}, {&(0x7f0000004840)=""/201, 0xc9}], 0x9, &(0x7f0000004a00)}}, {{&(0x7f0000004a40)=@abs, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004ac0)=""/72, 0x48}, {&(0x7f0000004b40)=""/39, 0x27}], 0x2, &(0x7f0000004bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000004d40), 0x6e, &(0x7f0000006100)=[{&(0x7f0000004dc0)=""/219, 0xdb}, {&(0x7f0000004ec0)=""/4096, 0x1000}, {&(0x7f0000005ec0)=""/227, 0xe3}, {&(0x7f0000005fc0)=""/139, 0x8b}, {&(0x7f0000006080)=""/76, 0x4c}], 0x5, &(0x7f0000006180)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x9, 0x1, &(0x7f00000064c0)) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000006540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000006600)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000065c0)={&(0x7f0000006580)={0x14, r10, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040044}, 0x20000010) syz_genetlink_get_family_id$ipvs(&(0x7f0000006640), r7) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x7) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000006780)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006740)={&(0x7f00000066c0)={0x48, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8010) r11 = syz_open_pts(r8, 0x200241) ioctl$TIOCSRS485(r11, 0x542f, &(0x7f00000067c0)={0x5, 0x20, 0x4}) r12 = syz_open_procfs(r1, &(0x7f0000006800)='net/llc/core\x00') ioctl$TIOCL_SCROLLCONSOLE(r12, 0x541c, &(0x7f0000006840)={0xd, 0xfffffffd}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000006880)={0x0, 0x9, [0x7, 0x5, 0x8fad, 0x0, 0x8, 0x2]}) fremovexattr(r6, &(0x7f00000068c0)=@known='trusted.overlay.origin\x00') ioctl$TIOCSISO7816(r5, 0xc0285443, &(0x7f0000006900)={0x0, 0x0, 0x4, 0x0, 0xfff}) open_by_handle_at(r9, &(0x7f0000006940)=@nfs={0x90, 0x24, {0x528d, 0x3, 0x1f, 0x80, "dfcfe7fdf4901726851b95ddf9c7c1dc491506f94eea86d676195fea283b80870ef8bd954064026534d1d636fdc4883234526b4a42346ea6fbd4102858cb745314f637f75db77db9ff5b697a872091105c0366fa70e980720b2186a52f63efc89ae80cce0a6b09a736f93c2837d96dce29a764e7e1ae7938d82b30a15c547a8f"}}, 0x200) 10:00:23 executing program 2: setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x200400, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x0, @multicast2, 0x4e23, 0x3, 'wlc\x00', 0x21, 0xffffffff, 0xf}, 0x2c) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000001c0)={'binder1\x00'}) r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0x7ff, 0x4000) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc45}]}, 0x4c}}, 0x20000081) r3 = open_tree(r2, &(0x7f0000000480)='./file0\x00', 0x8300) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in6, @in=@broadcast}}, {{@in6}}}, &(0x7f00000005c0)=0xe8) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000600)={0x0, 0x3ff, 0x50, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000a00)={r4, 0x101, 0x0, [0x6, 0x3, 0x695a, 0x4, 0x4b], [0x80, 0x9, 0x1000, 0x7, 0xd8, 0x100000000, 0x9, 0x5, 0x2, 0x10000, 0x1a, 0x7, 0x2, 0x4, 0x5, 0x8, 0x7fff, 0x1, 0x3, 0xfff, 0x7, 0x696, 0x10000, 0x1, 0x776e, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x4, 0xd6, 0xec, 0xffffffff, 0x7, 0x7, 0xae8, 0x400, 0x9, 0x7, 0xb43, 0x7fff, 0xfffffffffffffffc, 0xb189, 0x6, 0x3, 0x8, 0x4194, 0xfffffffffffffff7, 0x0, 0x6f, 0x5, 0x85c, 0x81, 0x1000, 0x800, 0x1000000000000000, 0x6, 0xc000000000000000, 0x3, 0x1000, 0x6, 0xc583, 0x5, 0x4e, 0x6, 0x20, 0x1ff, 0x0, 0x0, 0xde35c00000000000, 0x8, 0x8, 0x1, 0x1, 0x40, 0x9, 0x7, 0x4, 0x40, 0x9, 0xfffffffffffffffb, 0x6b, 0x3f, 0x400, 0x0, 0x1, 0x211, 0x0, 0x2, 0x401, 0x7fffffff, 0x2, 0x20, 0x72, 0xeae6, 0x5, 0x8, 0x8, 0x280000000000, 0x1, 0x4, 0x8, 0x3, 0x7f65a547, 0x5, 0x4, 0x7, 0x3f, 0x10000, 0x6, 0x0, 0xf56, 0x6, 0x80, 0x3f, 0x3, 0x75, 0x5, 0x10000, 0x100000000]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, 0x4, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xff}]}]}, 0x48}}, 0x4000000) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000f80)=0xffffffff, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000fc0), 0x141040, 0x0) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0xd}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x38}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xf5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4014}, 0x4008800) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f0000001140)={0x3f, 0x2, 0x20, 0x1f}) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) 10:00:23 executing program 3: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x3f, 0x8000, 0xb7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0) fcntl$setflags(r1, 0x2, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$KDENABIO(r0, 0x4b36) r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x1) ioctl$KDDISABIO(r2, 0x4b37) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000100)={0x2, 0x5, 0x5, 0x5}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000140)=0x4) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000000180)=0x6) r3 = syz_io_uring_complete(0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000005c0)={0x1, 0x0, 0x16, 0x1e, 0xde, &(0x7f00000001c0)}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$FIOCLEX(r4, 0x5451) r5 = openat$cgroup_type(r1, &(0x7f0000002bc0), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000002d00)={0x3, 0x1f, 0xc1, &(0x7f0000002c00)=""/193}) recvmmsg$unix(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002d40)=""/251, 0xfb}, {&(0x7f0000002e40)=""/30, 0x1e}, {&(0x7f0000002e80)=""/167, 0xa7}, {&(0x7f0000002f40)=""/89, 0x59}], 0x4, &(0x7f0000003000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003040), 0x6e, &(0x7f00000031c0)=[{&(0x7f00000030c0)=""/234, 0xea}], 0x1, &(0x7f0000003200)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003300)=[{&(0x7f00000032c0)=""/10, 0xa}], 0x1, &(0x7f0000003340)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x3, 0x2140, &(0x7f0000003480)) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f00000034c0)=0x9, 0x4) [ 125.780389] audit: type=1400 audit(1748685623.886:7): avc: denied { execmem } for pid=282 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:00:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffa}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0xc000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x851) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4010) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x2c, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8894}, 0x800) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r9, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0xb}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c8}]}, 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x38, r10, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x7ff, 0x75}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4000040) renameat2(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', 0x4) 10:00:23 executing program 6: sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x40) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x840) r2 = signalfd4(r1, &(0x7f0000000240)={[0x6]}, 0x8, 0x80000) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0xfffffff7}, 0x6, 0x0, 0x80, 0xff, 0x11, 'syz1\x00', "837a2616484714dbcd76beaae43f343edc1fa43c3a5ff1a9a8c2a5e87b6cff26", "86cf94144f51ca221ad8aee03fb8a229b9a99e65bdc1a2c2ec3efeabae129c15", [{0x7fff, 0x9, {0x2, 0x7}}, {0x800, 0x8, {0x0, 0xea6}}, {0x5, 0x6, {0x0, 0xfffffffb}}, {0x6, 0x4, {0x1, 0x9}}, {0x0, 0xe237}, {0x2, 0xfff7, {0x2, 0x9}}, {0x1e, 0x63, {0x3, 0x7}}, {0x3, 0x1f, {0x0, 0x17}}, {0xf801, 0x9, {0x0, 0xffffa7d8}}, {0xff, 0x0, {0x0, 0x5}}, {0x9, 0x9, {0x3, 0x1}}, {0x0, 0x7, {0x1}}, {0x800, 0x8d8d, {0x0, 0xeefa}}, {0x9c, 0x5, {0x0, 0xfffffffd}}, {0x4b, 0x5, {0x3, 0x4}}, {0x7ff, 0xfff, {0x1, 0x80}}, {0x6, 0x800, {0x3b4cc4d43ed5e557, 0x833}}, {0x101, 0x3f, {0x2, 0x5}}, {0x5, 0x8000, {0x1, 0x4}}, {0xf1, 0x181, {0x2, 0x804}}, {0x8000, 0x6, {0x3, 0x2}}, {0x7, 0x0, {0x0, 0x9}}, {0x20, 0x2, {0x1, 0xfd2}}, {0xfff7, 0x20, {0x2, 0x80000001}}, {0x4, 0x9, {0x2, 0xcc25}}, {0x6, 0x33, {0x2}}, {0x1, 0x3, {0x1, 0xad45}}, {0x8, 0x8, {0x1, 0x3}}, {0x7f, 0x4, {0x1, 0xffffffff}}, {0x4, 0x40, {0x0, 0x7b}}, {0x4, 0x3, {0x1, 0x4fa5}}, {0x7, 0x0, {0x2, 0xfffffff9}}, {0x9, 0x8, {0x0, 0xffff}}, {0x2, 0x4, {0x0, 0xf098}}, {0x4f1d, 0x3f, {0x0, 0xfffffff9}}, {0x20, 0xfff, {0x0, 0x1}}, {0x57, 0x35, {0x1, 0x13}}, {0x7, 0x6, {0x1, 0x1}}, {0x8310, 0x7fff, {0x3, 0x4}}, {0xffff, 0x7, {0x0, 0xa07}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000000}, 0x40090) r3 = syz_io_uring_complete(0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x0, [0x5, 0x7, 0x6]}, &(0x7f0000000640)=0x44) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0\x00'}) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x3, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffff652}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000040) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffc01}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffff0000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xe}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xd}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x29}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0xc8}}, 0x20000001) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a00), r4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000c40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a40)={0x194, r6, 0x10, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x3f}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x411}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xad2}, {0x6, 0x16, 0x81}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff9}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xf8a5}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x3f}, {0x6, 0x16, 0x4}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x7}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8400}, 0x4) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c80), 0x40, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x78, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x20, 0x6e}}}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x80000001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1c}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x256}]]}, 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0x8000) r8 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r8) r9 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000e40), 0x400000, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r5) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x84, r10, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6b1}, {0x6, 0x11, 0x39}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xff}}]}, 0x84}}, 0x4) 10:00:23 executing program 5: ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan1\x00'}) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000040)={0x2, 0x45, "cc386791e989f3ccf67cd1a260036f892b588be695e58bfeb8b6af88e8744a677b3ffec531cbd2aafddec70cfff0a75740dc9fa3b9d2ce5942175273e8b1d32a6d018964c3"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa0}}, './file0\x00'}) getsockname$netlink(r0, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000180)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000001c0)={0x1, {{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x3}}, {{0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xad}}}, 0x108) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000300), &(0x7f0000000340)=0x40) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f8, 0x100, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000480)={0x2, {0x2, 0x7, 0x0, 0x1, 0x81, 0x3}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x101, @link='broadcast-link\x00'}}}, [""]}, 0x68}}, 0x44000) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000640)) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fallocate(r2, 0x41, 0x0, 0x8) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000680)) write$snapshot(r0, &(0x7f00000006c0)="a1fd5005ae5bb47089c48cbb2047ff12ded1c164011eea168f59fc6c95f01c1f7b972e9fd225926cfca6ac4be93029a2056752b76ef7936f3e6df518437b79e6fc14847a41a9035e112be3343d0f29904bb970b1e91d132be3d20863c0cf3b0e9ff6d12a509798f71376ffe5d247f4cdff4d90b1e1f4907c6ca6e8b7c1a098ccd26d1e2c61a01a3c47fc4024ef0f87f178fecc339d0b733f974c986391328359ee5adcb7984728175c7a80784a9e9e69999161c7a5a868dc7b3e752062a071223ab5105ea5576e3385ee60e3a23f87a1", 0xd0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f00000007c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000800)="7d4b943fb8c4191bdb292d3a1252dc5609628e38f0a3c27c4b320e0c73796f48ed9ca17f0493d66444dda0edf85cef37531343965b14635f5186c783958e6f20747a527d4c1a6f75c9c5d072395d04624edf25ea7e808d9794b17c7d7526b553c9f4c5e9d1f3b390323ff81db437b5d986b53b8df17c529a38caca3e918c7b51133b69e73bd8bb1b36bac70ac167aacfba24a5f2", 0x94}, {&(0x7f00000008c0)="027ee22d1280bd274e7fc5c5273ab21b7db5b931fb5b7a67b062a95b523d6cc1283347e69852aad4aa62bce209c575f4e255c9562b6fa5bfcb52568920ee6b7ad4c3b98739e6ea6baf4434a39681174fc2baef3b3b06c8253b303aa42e39d114c6f017840a447a78d96f9e55f2b89616bb285c5d4a7b1d02aadfa445401e3af25a89f3681501eb3b918a310179f914f6299a660c38647aea8f63d6841d2665846377ddf5a21ad5f3df7378418e37de7a051b26db300df1a428ca2a3f4ba0eb24f7420068992236db815aa244c9f3451b37be2bda8d717d158b", 0xd9}], 0x2, &(0x7f0000000a00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x58, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x3, [{0x6, 0xb, "e867dce7f916cb60d1"}, {0x5, 0x4, "35e5"}, {0x6, 0xd, "ab3d047ec5c28d8c8f8f4d"}, {0x0, 0x8, "70bd008d34c5"}, {0x2, 0x9, "9b807c063db7de"}]}, @cipso={0x86, 0x15, 0x0, [{0xc6990cd4c381b6bc, 0xd, "da7ae81beb1d5a5721b01c"}, {0x1, 0x2}]}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@lsrr={0x83, 0x27, 0x1d, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @loopback, @local, @multicast2, @broadcast, @rand_addr=0x64010102, @remote, @empty]}, @noop, @rr={0x7, 0x17, 0x9a, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @local]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x29, 0x3, 0x0, [{@multicast1, 0x20}]}, @timestamp={0x44, 0x20, 0x43, 0x0, 0x2, [0x6, 0x40, 0x8, 0x7f, 0xb72f, 0x81, 0xee2]}, @generic={0x86, 0x2}, @end]}}}], 0x128}}, {{&(0x7f0000000b40)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000c80)=[{&(0x7f0000000b80)="0c34ea84f0eda0bda0684022c5e14948f6f14a50706901bb2d8463aa0c36cb198c52d68bd11e475e4172e7f3e2f2de047bfd1a7d0be1e8ce1c3d2a4925fdc2d13bf61c001d85b0e7bd4a565ce726d6f7dc83bb8f6ccc39de2a0223caf64328f9ade012580d739e65d5c62369e20457440bde7fb835df708c4d258735617cf9507452c5fc2e78ce6f3901afa8baa28e9871907a132a05929d157b533c1a2659984db05f28392c5c4009a08b7d3403f71958b9807039d42bdd3c9c3501e2bf61c752d0b640262a4978a658686015e10f65c7b99f873302148ff489863c6628901717e562d44964e05ccd7706", 0xeb}], 0x1}}], 0x2, 0x800) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000d40)={'wg2\x00', {0x2, 0x0, @multicast2}}) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e40)={0x90, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0xe}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "4841c460e8a44246dbb5e768be7d0f"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "657a47d381"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x10) 10:00:24 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x910, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, 0x2, 0x9, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7ff}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf8280000}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40040) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x48, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r6, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r7, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:bsdpty_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4004050) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x2) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r4) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r8, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000c40)={0x0, 0x1, {0x1a, 0x15, 0x7, 0x1b, 0x1, 0x2, 0x2, 0x167, 0x1}}) [ 127.210408] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 127.216360] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 127.220244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 127.229344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 127.236395] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 127.285855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.292326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.295036] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.298025] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.299619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.303415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.317817] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.319423] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.331292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.332830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.367588] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 127.374859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 127.377242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 127.381073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 127.394397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 127.397943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 127.404515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 127.408768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 127.414281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 127.420090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 127.425174] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 127.427354] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 127.429163] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.433218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.436433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.446015] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.448340] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 127.473450] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 127.484844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 127.518818] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 127.542744] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 127.543397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 127.584160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 127.616077] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 127.638978] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.289336] Bluetooth: hci0: command tx timeout [ 129.352660] Bluetooth: hci2: command tx timeout [ 129.480996] Bluetooth: hci1: command tx timeout [ 129.545817] Bluetooth: hci3: command tx timeout [ 129.546828] Bluetooth: hci6: command tx timeout [ 129.609920] Bluetooth: hci4: command tx timeout [ 129.672693] Bluetooth: hci7: command tx timeout [ 129.673400] Bluetooth: hci5: command tx timeout [ 131.337145] Bluetooth: hci0: command tx timeout [ 131.400631] Bluetooth: hci2: command tx timeout [ 131.528619] Bluetooth: hci1: command tx timeout [ 131.592750] Bluetooth: hci6: command tx timeout [ 131.593193] Bluetooth: hci3: command tx timeout [ 131.656878] Bluetooth: hci4: command tx timeout [ 131.720660] Bluetooth: hci5: command tx timeout [ 131.721104] Bluetooth: hci7: command tx timeout [ 133.384684] Bluetooth: hci0: command tx timeout [ 133.449903] Bluetooth: hci2: command tx timeout [ 133.577002] Bluetooth: hci1: command tx timeout [ 133.640635] Bluetooth: hci3: command tx timeout [ 133.641096] Bluetooth: hci6: command tx timeout [ 133.704810] Bluetooth: hci4: command tx timeout [ 133.768618] Bluetooth: hci5: command tx timeout [ 133.769066] Bluetooth: hci7: command tx timeout [ 135.433598] Bluetooth: hci0: command tx timeout [ 135.496664] Bluetooth: hci2: command tx timeout [ 135.625226] Bluetooth: hci1: command tx timeout [ 135.689738] Bluetooth: hci3: command tx timeout [ 135.691619] Bluetooth: hci6: command tx timeout [ 135.752684] Bluetooth: hci4: command tx timeout [ 135.816726] Bluetooth: hci7: command tx timeout [ 135.817641] Bluetooth: hci5: command tx timeout [ 187.087040] syz-executor.1 (295) used greatest stack depth: 25056 bytes left [ 187.162251] syz-executor.4 (296) used greatest stack depth: 24816 bytes left [ 189.722729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.726032] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.730144] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.739173] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.751706] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.871171] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 189.875193] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 189.896259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 189.905375] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 189.910969] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.919456] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.924141] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.941291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.967873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.012371] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.016717] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.021275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.024440] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.044894] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.054492] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.139080] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.168502] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.181025] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.193049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.198048] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.241951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.275983] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.293160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.338141] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.370779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 190.377840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 190.382232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.386268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 190.393826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 190.402303] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 190.405799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 190.411950] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 190.424973] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 190.439062] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 190.494051] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 191.819665] Bluetooth: hci0: command tx timeout [ 192.008642] Bluetooth: hci1: command tx timeout [ 192.074754] Bluetooth: hci2: command tx timeout [ 192.136672] Bluetooth: hci3: command tx timeout [ 192.264996] Bluetooth: hci4: command tx timeout [ 192.456918] Bluetooth: hci6: command tx timeout [ 192.456939] Bluetooth: hci5: command tx timeout [ 192.584630] Bluetooth: hci7: command tx timeout [ 193.864830] Bluetooth: hci0: command tx timeout [ 194.056704] Bluetooth: hci1: command tx timeout [ 194.122565] Bluetooth: hci2: command tx timeout [ 194.185151] Bluetooth: hci3: command tx timeout [ 194.312689] Bluetooth: hci4: command tx timeout [ 194.505637] Bluetooth: hci6: command tx timeout [ 194.506193] Bluetooth: hci5: command tx timeout [ 194.634012] Bluetooth: hci7: command tx timeout [ 195.915597] Bluetooth: hci0: command tx timeout [ 196.105879] Bluetooth: hci1: command tx timeout [ 196.169594] Bluetooth: hci2: command tx timeout [ 196.233715] Bluetooth: hci3: command tx timeout [ 196.361612] Bluetooth: hci4: command tx timeout [ 196.552822] Bluetooth: hci5: command tx timeout [ 196.553377] Bluetooth: hci6: command tx timeout [ 196.680593] Bluetooth: hci7: command tx timeout [ 197.962734] Bluetooth: hci0: command tx timeout [ 198.152613] Bluetooth: hci1: command tx timeout [ 198.216851] Bluetooth: hci2: command tx timeout [ 198.283561] Bluetooth: hci3: command tx timeout [ 198.409891] Bluetooth: hci4: command tx timeout [ 198.600887] Bluetooth: hci5: command tx timeout [ 198.602017] Bluetooth: hci6: command tx timeout [ 198.729937] Bluetooth: hci7: command tx timeout [ 251.933193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.938053] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.941180] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 251.947375] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 251.952165] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.009875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.016449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.019028] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.026448] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.035266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.177048] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.192711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.195253] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.197501] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.215176] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.229112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.231770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.262912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.281160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.325695] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.347010] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.358623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.362692] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 252.366218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.380205] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 252.388339] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.404097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.428127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 252.450391] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.452998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.455736] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 252.458025] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.460388] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.462949] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.469486] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.474246] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.478374] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.486943] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.499814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.525246] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 254.025689] Bluetooth: hci0: command tx timeout [ 254.089852] Bluetooth: hci1: command tx timeout [ 254.410117] Bluetooth: hci3: command tx timeout [ 254.411286] Bluetooth: hci2: command tx timeout [ 254.537670] Bluetooth: hci4: command tx timeout [ 254.600772] Bluetooth: hci6: command tx timeout [ 254.664671] Bluetooth: hci7: command tx timeout [ 254.665513] Bluetooth: hci5: command tx timeout [ 256.074712] Bluetooth: hci0: command tx timeout [ 256.136807] Bluetooth: hci1: command tx timeout [ 256.456711] Bluetooth: hci3: command tx timeout [ 256.457943] Bluetooth: hci2: command tx timeout [ 256.584747] Bluetooth: hci4: command tx timeout [ 256.648972] Bluetooth: hci6: command tx timeout [ 256.712761] Bluetooth: hci5: command tx timeout [ 256.714073] Bluetooth: hci7: command tx timeout [ 258.121385] Bluetooth: hci0: command tx timeout [ 258.184824] Bluetooth: hci1: command tx timeout [ 258.505946] Bluetooth: hci2: command tx timeout [ 258.506920] Bluetooth: hci3: command tx timeout [ 258.632750] Bluetooth: hci4: command tx timeout [ 258.696916] Bluetooth: hci6: command tx timeout [ 258.761032] Bluetooth: hci5: command tx timeout [ 258.761880] Bluetooth: hci7: command tx timeout [ 260.168844] Bluetooth: hci0: command tx timeout [ 260.232630] Bluetooth: hci1: command tx timeout [ 260.552687] Bluetooth: hci3: command tx timeout [ 260.553190] Bluetooth: hci2: command tx timeout [ 260.680599] Bluetooth: hci4: command tx timeout [ 260.745736] Bluetooth: hci6: command tx timeout [ 260.810863] Bluetooth: hci5: command tx timeout [ 260.811308] Bluetooth: hci7: command tx timeout [ 314.462130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 314.465299] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 314.474457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 314.482647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 314.487254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.536656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.540842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.547444] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.554173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.559215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.665023] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.673344] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.683980] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.695114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.719499] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.737805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.754145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.790262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.802421] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.824492] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.827363] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.834444] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.839007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.842352] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.846594] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 314.857483] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 314.862070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.864448] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 314.868142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.872749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 314.881931] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.884470] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 314.884660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.892074] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.894294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.895875] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 314.899102] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 314.931188] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 314.972332] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 314.990889] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 316.553622] Bluetooth: hci0: command tx timeout [ 316.619581] Bluetooth: hci1: command tx timeout [ 316.808754] Bluetooth: hci2: command tx timeout [ 316.937598] Bluetooth: hci5: command tx timeout [ 316.937777] Bluetooth: hci3: command tx timeout [ 317.001142] Bluetooth: hci6: command tx timeout [ 317.002138] Bluetooth: hci4: command tx timeout [ 317.064621] Bluetooth: hci7: command tx timeout [ 318.602765] Bluetooth: hci0: command tx timeout [ 318.664617] Bluetooth: hci1: command tx timeout [ 318.856582] Bluetooth: hci2: command tx timeout [ 318.984719] Bluetooth: hci5: command tx timeout [ 318.985595] Bluetooth: hci3: command tx timeout [ 319.048625] Bluetooth: hci4: command tx timeout [ 319.048929] Bluetooth: hci6: command tx timeout [ 319.113572] Bluetooth: hci7: command tx timeout [ 320.648739] Bluetooth: hci0: command tx timeout [ 320.713541] Bluetooth: hci1: command tx timeout [ 320.904793] Bluetooth: hci2: command tx timeout [ 321.032867] Bluetooth: hci3: command tx timeout [ 321.033310] Bluetooth: hci5: command tx timeout [ 321.096639] Bluetooth: hci6: command tx timeout [ 321.097072] Bluetooth: hci4: command tx timeout [ 321.160602] Bluetooth: hci7: command tx timeout [ 322.696584] Bluetooth: hci0: command tx timeout [ 322.761128] Bluetooth: hci1: command tx timeout [ 322.952610] Bluetooth: hci2: command tx timeout [ 323.081791] Bluetooth: hci5: command tx timeout [ 323.082237] Bluetooth: hci3: command tx timeout [ 323.144782] Bluetooth: hci6: command tx timeout [ 323.145225] Bluetooth: hci4: command tx timeout [ 323.208786] Bluetooth: hci7: command tx timeout [ 376.607929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.613396] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.619008] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.630236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.638631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.796387] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.801114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.804406] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.815172] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.828072] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.937777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 376.951850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 376.956086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 376.967185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 376.976077] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 376.979042] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 376.994419] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 376.999063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.025355] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.029698] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.031960] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.041028] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.043421] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.054783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.060161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.120374] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 377.123432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 377.132435] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 377.138857] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 377.150911] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 377.156248] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 377.159644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 377.166596] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 377.171168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 377.193148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 377.207787] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 377.216321] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 377.221170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 377.234097] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 377.239869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 378.696641] Bluetooth: hci0: command tx timeout [ 378.888881] Bluetooth: hci1: command tx timeout [ 379.080835] Bluetooth: hci2: command tx timeout [ 379.081750] Bluetooth: hci3: command tx timeout [ 379.146066] Bluetooth: hci4: command tx timeout [ 379.336819] Bluetooth: hci7: command tx timeout [ 379.337501] Bluetooth: hci6: command tx timeout [ 379.529944] Bluetooth: hci5: command tx timeout [ 380.745675] Bluetooth: hci0: command tx timeout [ 380.937579] Bluetooth: hci1: command tx timeout [ 381.129622] Bluetooth: hci2: command tx timeout [ 381.130054] Bluetooth: hci3: command tx timeout [ 381.192855] Bluetooth: hci4: command tx timeout [ 381.384647] Bluetooth: hci6: command tx timeout [ 381.385081] Bluetooth: hci7: command tx timeout [ 381.577540] Bluetooth: hci5: command tx timeout [ 382.792793] Bluetooth: hci0: command tx timeout [ 382.984595] Bluetooth: hci1: command tx timeout [ 383.176600] Bluetooth: hci3: command tx timeout [ 383.177075] Bluetooth: hci2: command tx timeout [ 383.240890] Bluetooth: hci4: command tx timeout [ 383.432862] Bluetooth: hci6: command tx timeout [ 383.433333] Bluetooth: hci7: command tx timeout [ 383.625582] Bluetooth: hci5: command tx timeout [ 384.842088] Bluetooth: hci0: command tx timeout [ 385.033563] Bluetooth: hci1: command tx timeout [ 385.224894] Bluetooth: hci2: command tx timeout [ 385.225407] Bluetooth: hci3: command tx timeout [ 385.289589] Bluetooth: hci4: command tx timeout [ 385.482702] Bluetooth: hci7: command tx timeout [ 385.483203] Bluetooth: hci6: command tx timeout [ 385.673779] Bluetooth: hci5: command tx timeout VM DIAGNOSIS: 10:05:27 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=ffff88803542fd40 RCX=ffffffff8687618c RDX=0000000000000000 RSI=ffffffff81354102 RDI=ffffffff85c1d1c0 RBP=ffff888035428000 RSP=ffff88803542f980 R8 =ffffffff86876190 R9 =ffff88803542fa30 R10=000000000003b6bd R11=0000000000024aa4 R12=ffff88803542fa01 R13=ffff88803542fa38 R14=ffff88803542fd40 R15=ffff88803542f9f0 RIP=ffffffff81354102 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f9d91c6f540 00000000 00000000 GS =0000 ffff8880e561b000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005626bafca4c8 CR3=000000000b6ac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0070656474666f732e73656c75646f6d XMM01=0070656474666f732e73656c75646f6d XMM02=00000000000000000000ffffffffffff XMM03=00000000000000000000ff00000000ff XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=676f6c206d6f74737563000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff88802c727140 RCX=ffff88802c726fcc RDX=1ffff110058e4e39 RSI=ffffffff81a7c36c RDI=ffff88802c72714c RBP=ffff88802c7271c8 RSP=ffff88802c727058 R8 =0000000000000001 R9 =ffff88802c7270b8 R10=000000000003b6bd R11=0000000000024ad0 R12=ffff88802c727140 R13=0000000000000000 R14=ffff888016ab0000 R15=0000000000092cc0 RIP=ffffffff81604a17 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e571b000 00000000 00000000 LDT=0000 fffffe3300000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa2a6f738b0 CR3=0000000037d58000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=756e696c2d34365f3638782f62696c2f XMM01=6461657268747062696c2f756e672d78 XMM02=00302e6f732e6461657268747062696c XMM03=2f756e672d78756e696c2d34365f3638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000